$ rpki-client -vvf repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft File: 5C559181306986EE89AADF0A1CFC78EA8A093530.mft (raw, json) Hash identifier: EWix6IqehTCsAaGqRJ2QyxuYFC8gYDyAOy2SXOrI2tQ= Subject key identifier: BD:AB:AB:97:99:FF:0F:F0:DF:5B:19:BE:83:39:09:1F:BE:BC:4D:B8 Authority key identifier: 5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 Certificate issuer: /CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Certificate serial: 75BAB6A8BEF1EB9070B83CB53CFAAB80EC31F40C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft Manifest number: 0144 Signing time: Sat 18 Oct 2025 23:51:15 +0000 Manifest this update: Sat 18 Oct 2025 23:46:15 +0000 Manifest next update: Wed 22 Oct 2025 06:02:15 +0000 Files and hashes: 1: 5C559181306986EE89AADF0A1CFC78EA8A093530.crl (hash: 6X8ueHkLIaQlVgemFBnKO2eZ22aWTuXYGJB/j32Mf20=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: QFsczwBLYtZasUqtJF/xZ2xkrtCRnC+5l41701uTMq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ba:b6:a8:be:f1:eb:90:70:b8:3c:b5:3c:fa:ab:80:ec:31:f4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Validity Not Before: Oct 18 23:46:15 2025 GMT Not After : Oct 22 06:02:15 2025 GMT Subject: CN=BDABAB9799FF0FF0DF5B19BE8339091FBEBC4DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:c6:af:7f:dc:89:11:b3:d5:3f:39:c8:59: d8:b7:ac:63:f2:b5:cc:6e:52:85:e0:58:1c:a0:d4: 87:5f:71:c2:30:e1:4e:6e:87:b8:8e:d9:6f:ae:fb: de:5f:d3:9e:63:52:75:b4:72:bd:e2:b3:f5:71:0e: 86:bf:33:32:af:cf:b4:d5:96:33:fa:da:3e:ae:ae: 6c:b1:12:d5:7f:f7:34:86:27:34:af:b7:ae:8d:05: 44:65:5d:6a:d6:6d:f9:67:ba:f2:28:94:1e:62:df: 28:6a:28:b5:0d:4b:17:2c:06:b8:07:3c:3b:21:67: 01:b5:81:da:13:ab:c9:60:f5:ff:98:47:00:69:fc: d7:b9:0a:4c:bb:5f:4d:c9:4f:4d:78:93:ea:a6:ee: ae:c7:0a:68:5f:33:6f:2d:5c:9e:92:b1:39:0f:05: 31:43:b3:9f:6f:6a:83:e4:dc:0b:df:14:ff:5a:d0: c8:c0:7c:d4:5a:0d:2b:61:6e:2e:dd:0e:4e:be:28: 34:50:1a:57:ca:2c:0b:ee:6d:f5:df:3e:c1:65:16: 3f:4e:5a:20:13:44:f9:e3:a8:d8:06:29:0b:cd:79: 11:cf:ce:48:24:c6:83:8c:78:ee:33:b9:cb:8b:12: b2:ba:05:21:d4:e8:ac:02:0f:85:0d:98:2e:a7:83: 73:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AB:AB:97:99:FF:0F:F0:DF:5B:19:BE:83:39:09:1F:BE:BC:4D:B8 X509v3 Authority Key Identifier: keyid:5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:18:58:59:66:af:bf:07:45:38:55:ea:1c:1a:13:2e:b9:3c: f1:54:95:00:f2:aa:5f:6f:77:30:b9:d3:35:2d:5c:79:25:5f: 57:28:c5:c8:87:37:df:97:8f:af:3c:46:8a:54:8d:43:a6:d0: ce:3f:ce:de:95:07:cc:3d:39:16:63:e5:fc:25:8d:28:5e:3f: 04:c2:19:60:77:58:2c:4a:db:b9:33:be:74:38:ef:b8:4f:ce: 34:82:6d:b0:0d:f3:95:c8:a8:92:0f:73:be:bb:c4:39:d3:3e: e4:bd:8c:c6:b1:09:7b:03:dc:5a:6f:74:bd:ce:04:a5:5e:ad: fa:1f:60:35:db:30:bc:07:ea:d0:60:db:cc:3d:22:36:bc:4f: e1:7d:42:8a:67:87:55:70:23:44:e4:15:8f:42:51:c2:54:bb: 9f:21:99:7b:91:ba:91:c7:34:04:85:9d:ab:4a:36:b5:99:00: 2c:4f:e8:7d:bd:5c:28:4f:6f:97:9a:54:38:a8:00:b9:a6:8e: e2:93:ea:77:e3:ed:4d:63:59:ff:71:f3:c1:54:71:2d:fd:40: a4:3c:87:9d:d9:23:80:31:93:fa:48:0d:8c:72:0b:b5:1d:8e: 27:4c:56:30:ca:7e:be:2d:dd:cb:c0:ab:18:f9:8b:8e:3b:1e: 37:c2:49:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbq2qL7x65BwuDy1PPqrgOwx9AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4 QTA5MzUzMDAeFw0yNTEwMTgyMzQ2MTVaFw0yNTEwMjIwNjAyMTVaMDMxMTAvBgNV BAMTKEJEQUJBQjk3OTlGRjBGRjBERjVCMTlCRTgzMzkwOTFGQkVCQzREQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+cavf9yJEbPVPznIWdi3rGPy tcxuUoXgWByg1IdfccIw4U5uh7iO2W+u+95f055jUnW0cr3is/VxDoa/MzKvz7TV ljP62j6urmyxEtV/9zSGJzSvt66NBURlXWrWbflnuvIolB5i3yhqKLUNSxcsBrgH PDshZwG1gdoTq8lg9f+YRwBp/Ne5Cky7X03JT014k+qm7q7HCmhfM28tXJ6SsTkP BTFDs59vaoPk3AvfFP9a0MjAfNRaDSthbi7dDk6+KDRQGlfKLAvubfXfPsFlFj9O WiATRPnjqNgGKQvNeRHPzkgkxoOMeO4zucuLErK6BSHU6KwCD4UNmC6ng3OhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvaurl5n/D/DfWxm+gzkJH768TbgwHwYDVR0j BBgwFoAUXFWRgTBphu6Jqt8KHPx46ooJNTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmE4MWU2ZS00YjE2LTRiNjItOGYxOC01Mjg5MmU1NGI5MGQvMC81QzU1OTE4MTMw Njk4NkVFODlBQURGMEExQ0ZDNzhFQThBMDkzNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4QTA5 MzUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4 RUE4QTA5MzUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoYWFlmr78HRThV6hwaEy65PPFUlQDyql9v dzC50zUtXHklX1coxciHN9+Xj688RopUjUOm0M4/zt6VB8w9ORZj5fwljShePwTC GWB3WCxK27kzvnQ477hPzjSCbbAN85XIqJIPc767xDnTPuS9jMaxCXsD3FpvdL3O BKVerfofYDXbMLwH6tBg28w9Ija8T+F9Qopnh1VwI0TkFY9CUcJUu58hmXuRupHH NASFnatKNrWZACxP6H29XChPb5eaVDioALmmjuKT6nfj7U1jWf9x88FUcS39QKQ8 h53ZI4Axk/pIDYxyC7UdjidMVjDKfr4t3cvAqxj5i447HjfCSYY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:06:00 2025 by rpki-client